3 air wave practical workshop_mike bruno_matt sidhu

CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 1 #airheadsconf #airheadsconf

AirWave – Practical workshop

Enabling Secure, Reliable and Cost effective WLANs

CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 2 #airheadsconf

Where does AirWave fit

Best practices around AirWave setup

How to leverage AirWave to solve WLAN issues

What’s new in AirWave 7.6

Q & A

Agenda


•  Multi-vendor wired/WLAN environments –  Mixed WLANs, L2/L3 switch vendors, Routers, Radius

•  Lack of End-to-End visibility –  Non-Integrated disparate consoles – WLAN, IDS, Wired etc

•  Transient problems difficult to replicate –  Mobility brings a unique challenge for troubleshooting

•  RF Analysis expertise is limited –  How to leverage your WLAN SME across the network

Challenges in Network Management


•  Multi-vendor Network Management solution –  End-to-End visibility for wireless and wired network –  Monitor almost any vendor equipment

•  Integrated Threat Management –  RAPIDS for Rogue detection and mitigation –  Consolidated wireless threat visibility

•  Troubleshooting tools for RF Analysis –  Client oriented troubleshooting for Level 1 Helpdesk –  RF Metrics and Location analysis for Level2/3 SME

•  Pro-active triggers and Extensive Reporting –  Actionable events giving heads-up before end users call-in –  Customizable reporting to gather trending info on WLAN

Why AirWave for Network management


WLAN Management Architecture

-  APs/AMs -  802.11 a/b/g/n radios -  Integrated IDS/IPS -  Spectrum Analysis

-  Controller (HW/VC) -  Centralized Radio Management -  Role based Policy Enforcement -  Centralized Analysis

-  Airwave -  Device Management -  WLAN Troubleshooting -  Visualization & Reporting


AirWave Data Flow

Airwave

Controller Virtual Controller

NMS Email, SNMP, Syslog


Where does the Data come from SN

MP

Trap

s A

MO

N

Airwave

Controller


Configuring AirWave Integration (Instant)

HTT

PS

Airwave

Virtual Controller


Configuring AirWave Integration

SNM

P Tr

aps

AM

ON

Airwave

Controller


AOS Traps received by AirWave

130+ Traps


Additional Traps to trigger alerts


Organizing AirWave setup

Groups Define Configuration Standard Devices share config in Group Defines polling intervals and protocol Share same Firmware level on devices Groups are non-hierarchical

Folders Similar to Directory structure on your PC Common monitoring, alerting Control role based access Hierarchical based organization No limit on level depth

Every device associated with ONLY 1 Group and Folder


Control and Visibility

Key RF Metrics

Historical usage

Client details


•  Rule based Rogue detection and escalation •  Wired correlation for Rogue AP detection •  Integrated IDS Event Management

Integrated Threat Management

Escalate IDS Events

Define Rogue AP Rules

Create Event Triggers AirWave provides unified view into all Wireless Threats in your network


AirWave VisualRF Location services

Visualize Rogue AP Location

Locate Interference sources

Review Coverage Heatmaps

Increases accuracy by automatically computing RF attenuation on the map


Easy Helpdesk Tool 1.  Find the device via search 2.  Check Client details : Any RF Issues ? 3.  Analyze AP, Controller, L2 switch

Help Desk tools for RF Triage

RF Heatmaps

Leverage Helpdesk to solve simple RF issues thus reducing workload on experts


Step-by-Step RF Analysis 1.  Review WLAN Stats 2.  Any Errors/Alarms on user ? 3.  Visually plot the user on the map

Forensic Analysis of RF Data

Check Connection details

Extensive RF data to help experts remotely analyze the root cause of problem


Pro-active Event Management Create Event Triggers

Notify when WLAN behavior is outside the spec

Escalate Alarms via Email, SNMP


View Reports

Compliance Reporting/Trending

Schedule Reports

Define Reports

Provide visibility to stakeholders via scheduled reports emailed automatically


Device Configuration Management

Discover Devices

Analyze Device

Audit Configuration

AirWave can Discover, Audit and Fix configuration mismatches or settings to the managed devices


Config Mgmt – Global vs Group

Device Specific (hostname)

Global/Group (VAP, AAA, SSID)

Full Device Config


•  Monitoring Features –  Sync up rogue classifications –  Rogue client monitoring –  Spectrum interferers –  Track channel utilization –  Bulk edit of VC variables including

custom variables

•  Troubleshooting and Diagnostics –  Single Sign-on to the Instant network –  Running CLI commands from AirWave •  Run a command on all APs from VC

–  Visibility into configuration errors

7.6 Release – Instant Enhancements


–  PDF Reports

–  Network Usage Report broken by folder

–  Top Clients in client session report by Bandwidth usage

7.6 Release – Reporting Improvements


•  API Improvements –  Additional API data about AP uptime and FQDN name

•  Trigger Enhancements –  Trigger on client count per BSSID (vs. AP)

–  Notes field to customize all alerts

•  Search with options –  Users can select to search on active or historical clients

•  Performance and Scalability –  AirWave PRO1500+, ENT 4000+ (extra RAM)

–  CAC Card Authentication

7.6 Release – AMP Features

3 air wave practical workshop_mike bruno_matt sidhu

Technology

aruba networks

confidential copyright

airwave setup groups

airheadsconf aos traps

airheadsconf additional

wlan sme

threat management rapids

location analysis